Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-118869

OS Command Injection Allowing Arbitrary Command Execution in SHIRASAGI

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product.

CVSS 4.0 · 8.7 High EPSS 1.1% KEV · Not listed
Vendors
Shirasagi Project
Products
Shirasagi
CVE-2026-117679

Authenticated XSS Enables Client‑Side Script Execution in SHIRASAGI

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary script in a user's web browser when the user accesses a website using the affected product.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Shirasagi Project
Products
Shirasagi
CVE-2026-81635

Cross‑site scripting in SHIRASAGI allows arbitrary script execution in the browser

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Shirasagi Project
Products
Shirasagi
CVE-2026-82582

Authorization Bypass Allowing Unauthorized File Retrieval in Shirasagi Groupware

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Shirasagi Project
Products
Shirasagi